Commit Graph
105 Commits
Author SHA1 Message Date
Martin Willi 73390cce24 removed unneded includes 2007-03-30 12:24:31 +00:00
Martin Willi 3374c8b1c8 using IFA_LOCAL for interface enumeration to support ppp links 2007-03-30 09:21:48 +00:00
Martin Willi 891e69944f implemented DoS protection with cookies and IP filter 2007-03-29 11:26:55 +00:00
Andreas Steffen 6819e4d754 implemented ipsec purgeocsp 2007-03-28 20:43:38 +00:00
Martin Willi 4deb89485c removed send_queue, handled internally in sender_t know
do header parsing in receiver, ready for cookie integration
2007-03-28 13:34:02 +00:00
Martin Willi 077a6fff95 implemented a simple IP blocking filter in receiver thread 2007-03-28 09:23:03 +00:00
Andreas Steffen 1bf8530507 implemented ipsec listocsp function 2007-03-27 04:40:25 +00:00
Martin Willi 6de7cf4e2f fixed SPI byte order 2007-03-21 16:09:27 +00:00
Martin Willi 44cd2bf0fa not installing a route when policy gets updated 2007-03-20 08:15:18 +00:00
Martin Willi e59bd409ab always update reqid on policy install, fixes dpdaction=hold issue 2007-03-19 10:00:56 +00:00
Martin Willi bb32e76c3a disabling routing for IPv6, does not work correctly 2007-03-08 20:17:34 +00:00
Andreas Steffen 9149635ffa support if ocsp signing certificates 2007-03-08 16:47:18 +00:00
Martin Willi 3c6337793f added (not yet supported) sha2 algorithms to kernel
only adding a route if using tunnel mode
2007-03-08 00:17:57 +00:00
Martin Willi 5bf1be3c9f fixed ID selection bug when peer doesn't include IDr payload
allowing vendor ID in any messag
2007-03-05 15:22:50 +00:00
Andreas Steffen 03ffdf7526 moved listing of crls to local_credential_store and ca 2007-03-03 21:10:22 +00:00
Martin Willi 373b8a607f fixed netlink socket receiver code
implemented interface enumeration code with netlink: no getifaddrs reqired anymore
2007-03-03 14:56:24 +00:00
Martin Willi 285bbed595 refactored kernel interface, works reliable again 2007-03-03 13:04:07 +00:00
Martin Willi 1d51abb71b implemented get_iface() using RTM_GETADDR
added support for multi-header netlink messages
really ugly now, need a lot of refactoring
2007-03-02 17:08:38 +00:00
Martin Willi ebc59e3bb8 added debuggin for interface lookup 2007-03-01 12:53:20 +00:00
Martin Willi 3c940a2e4b fixed address lookup when !using getifaddrs() 2007-03-01 12:35:21 +00:00
Martin Willi 0c8aba6771 added support for 0.0.0.0/0 traffic selectors
fixed routing to make correct 0.0.0.0/0 routes
2007-03-01 11:42:08 +00:00
Martin Willi c60c7694d2 merged tasking branch into trunk 2007-02-28 14:04:36 +00:00
Andreas Steffen f3f390eb76 changed ca info to ca 2007-02-25 18:47:09 +00:00
Andreas Steffen 83fbaa1ff0 full support of ca info records 2007-02-24 23:18:08 +00:00
Andreas Steffen 182d20e94e support of ca info records 2007-02-23 15:15:31 +00:00
Martin Willi a02ae4ccd5 using "left" as my host per default, swapping to "right" when needed 2007-02-15 12:13:18 +00:00
Andreas Steffen 5943682737 prepared support of ca information records and ocsp functionality 2007-02-14 01:04:46 +00:00
Martin Willi f27f6296e6 merged EAP framework from branch into trunk
includes a lot of other modifications
2007-02-12 15:56:47 +00:00
Martin Willi 1908670f99 added threads to support multiple simultaneous stroke requests 2007-02-02 07:30:19 +00:00
Andreas Steffen 10984fc905 corrected typo 2007-01-10 08:17:10 +00:00
Martin Willi f73d4c9eb0 fixed reuathentication when connections other host is %any 2007-01-03 09:26:44 +00:00
Martin Willi 60d79e496b fixed host conversion length check 2007-01-03 09:25:57 +00:00
Martin Willi 7652be891c added support for transport mode and (experimental!) BEET mode
support for the type=transport/tunnel parameter in charon
2006-12-21 14:35:17 +00:00
Martin Willi 6fe03b0af0 implemented reauthentication using the new reauth=yes|no parameter 2006-12-19 07:30:07 +00:00
Andreas Steffen 1183f8ac82 improved selection of ipsec status|statusall <name> 2006-11-02 18:30:50 +00:00
Martin Willi 116b53b6bd proper "ipsec up" signal handling when initiating to %any 2006-11-02 10:28:10 +00:00
Andreas Steffen 5661bf8623 cosmetics 2006-11-01 23:02:07 +00:00
Andreas Steffen d053fe5888 fixed ipsec status|statusall <name> 2006-11-01 20:29:53 +00:00
Andreas Steffen efa0ed68cf redesigned formatting of ipsec status|statusall 2006-11-01 17:28:47 +00:00
Andreas Steffen 923ee10eef solved 64 bit issue in push/pop stroke interface 2006-10-31 23:17:21 +00:00
Andreas Steffen 231f704548 fixed 64 bit issue 2006-10-31 21:37:25 +00:00
Martin Willi db7ef62494 better split up of library files "types.h" & "definitions.h"
centralized all printf specifier character definitions
reuse of arginfo handlers
more cleanups
fixed more AMD64 issues
added DEBUG_LEVEL compile flag to exclude DBGn() statements
2006-10-31 12:27:59 +00:00
Martin Willi 382b481795 moved typedefs to beginning of files to solve some include problems
splitted authenticator to have a separate implementation for each auth_method_t
using va_copy to clone va_lists, should fix proplems on AMD64
some other cleanups
2006-10-30 14:07:05 +00:00
Martin Willi ebdddb74d4 some improvements in signaling code 2006-10-27 10:46:56 +00:00
Martin Willi b83806d83d improved signal handling and emitting 2006-10-26 09:46:56 +00:00
Andreas Steffen 66a09e1d6e redesigned list output format 2006-10-25 08:41:27 +00:00
Martin Willi 191a26a6a7 removed deprecated iterator methods (has_next & current)
added iterator hook to manipulate iterator the clean way
2006-10-24 14:20:45 +00:00
Martin Willi 5c4cc9a4e3 added verbosity level to stroke 2006-10-24 08:44:47 +00:00
Martin Willi 60356f3375 introduced new logging subsystem using bus:
passive listeners can register on the bus
  active listeners wait for signals actively
  multiplexing allows multiple listeners to receive debug signals
  a lot more...
2006-10-18 11:46:13 +00:00
Martin Willi 47f5027807 introduced printf() specifiers for:
host_t (%H)
  identification_t (%D)
  chunk pointers (%B)
  memory pointer/length (%b)
added a signaling bus:
  receives event and debug messages, sends them to its listeners
  stream_logger, sys_logger, file_logger added, listen to bus
some other tweaks here and there
2006-09-27 14:14:44 +00:00